Several people in the past have experienced problems with Cisco Anyconnect on OpenSuse not opening the 2fa window and throwing an error.
(Most notably: Cisco AnyConnect connections issues and: Reddit - The heart of the internet). No final solution to the problem was offered: the app established a first connection to the vpn server but errored out on opening the 2FA screen.
Given that it took me some time to find the solution, I thought someone out there might benefit from what I found to work. I am using Cisco Security Client 5.1.5.65 on Tumbleweed, Plasma 6.4.3
The solution to this is to NOT adjust BypassDownloader in /opt/cisco/anyconnect/AnyConnectLocalPolicy.xml to ‘true’ as is mentioned in the thread on reddit linked above, but to leave it false. I did do all the other steps.
When you reach this state the Cisco app does start up, but something to do with Wayland obstructs the Cisco client to open the 2FA window. Launching the app in the terminal throws: Error 71 (Protocol error) dispatching to Wayland display.
(In my case this was not resolved by adding
GSK_RENDERER=gl or GSK_RENDERER=ngl to ~/.config/environment.d/gsk.conf, a solution offered in many places.)
What does work (in my case) is to start the app from cli (/opt/cisco/secureclient/bin) by running: WEBKIT_DISABLE_DMABUF_RENDERER=1 ./vpnui
This should open the 2FA popup window. I made an alias for it so I can run AnyConnect by just typing ‘cisco’ on the command line.